Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Marc Tremblay 
Good morning,

At our school board we have been converting all our older technology to 
Lubuntu. Our network manager has brought up a problem that he views as a 
security risk. He is not familiar with Linux and does not really like having 
these devices on our network.

In Network connections, users are able to access the network connections for 
the WIFI, click on edit and then click show password to see the credentials 
used for the WIFI access. In the case where the device belongs to one 
individual that's not a problem but we have a many class sets of devices used 
by many students and we don't want them to see the WIFI credentials and share 
them with friends etc..

I know this is probably very simple but is there a way to have the network 
connections section password protected? In most cases when you try to modify 
settings and install programs you are prompted for a password.

Any help would be greatly appreciated.
-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

Re: Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Andre Campos Rodovalho 
You might want a Key Manager. It stores the ciphered passwords to use later
on... I know there is gnome-keyring for Gnome and kwallet for KDE. I guess
it is opitional to use gnome-keyring with network-manager (nm-applet)...

I could not find anything about activating it, googling it I only see
people trying to get rid of it on Ubuntu.

Another better way to ensure network security is to apply MAC filter (a
list of allowed hardware). Password in this case is optional...


2015-06-16 10:15 GMT-03:00 Marc Tremblay :

>  Good morning,
>
>
>
> At our school board we have been converting all our older technology to
> Lubuntu. Our network manager has brought up a problem that he views as a
> security risk. He is not familiar with Linux and does not really like
> having these devices on our network.
>
>
>
> In Network connections, users are able to access the network connections
> for the WIFI, click on edit and then click show password to see the
> credentials used for the WIFI access. In the case where the device belongs
> to one individual that’s not a problem but we have a many class sets of
> devices used by many students and we don’t want them to see the WIFI
> credentials and share them with friends etc..
>
>
>
> I know this is probably very simple but is there a way to have the network
> connections section password protected? In most cases when you try to
> modify settings and install programs you are prompted for a password.
>
>
>
> Any help would be greatly appreciated.
>
> --
> Lubuntu-users mailing list
> Lubuntu-users@lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/lubuntu-users
>
>
-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

Re: Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Peter Golis 

Hello Marc,
Did you had try to setup WiFi network manually without use of graphical network 
manager? This will avoid readability of password/passpharse if configuration 
will be readable only by OS.
 
Peter.
 
__

Od: Marc Tremblay 
Komu: "'lubuntu-users@lists.ubuntu.com'" 
Dátum: 16.06.2015 15:16
Predmet: Security question regarding hiding the WIFI configuration username and 
password


Good morning,
 
At our school board we have been converting all our older technology to 
Lubuntu. Our network manager has brought up a problem that he views as a 
security risk. He is not familiar with Linux and does not really like having 
these devices on our network.
 
In Network connections, users are able to access the network connections for 
the WIFI, click on edit and then click show password to see the credentials 
used for the WIFI access. In the case where the device belongs to one 
individual that’s not a problem but we have a many class sets of devices used 
by many students and we don’t want them to see the WIFI credentials and share 
them with friends etc..
 
I know this is probably very simple but is there a way to have the network 
connections section password protected? In most cases when you try to modify 
settings and install programs you are prompted for a password.
 
Any help would be greatly appreciated.


--

--
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users 


-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

RE: Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Marc Tremblay 
Hi Andre,

Apparently the mac filter works with our Chromebooks and iPads but not with our 
HP laptops and netbooks and other hardware models. I’m not sure why. He just 
old me that he can’t use that option with our Lubuntu devices.

From: Andre Campos Rodovalho [mailto:andre.rodova...@gmail.com]
Sent: June-16-15 9:40 AM
To: Marc Tremblay
Cc: lubuntu-users@lists.ubuntu.com
Subject: Re: Security question regarding hiding the WIFI configuration username 
and password

You might want a Key Manager. It stores the ciphered passwords to use later 
on... I know there is gnome-keyring for Gnome and kwallet for KDE. I guess it 
is opitional to use gnome-keyring with network-manager (nm-applet)...

I could not find anything about activating it, googling it I only see people 
trying to get rid of it on Ubuntu.

Another better way to ensure network security is to apply MAC filter (a list of 
allowed hardware). Password in this case is optional...


2015-06-16 10:15 GMT-03:00 Marc Tremblay 
mailto:mtremb...@lbpsb.qc.ca>>:
Good morning,

At our school board we have been converting all our older technology to 
Lubuntu. Our network manager has brought up a problem that he views as a 
security risk. He is not familiar with Linux and does not really like having 
these devices on our network.

In Network connections, users are able to access the network connections for 
the WIFI, click on edit and then click show password to see the credentials 
used for the WIFI access. In the case where the device belongs to one 
individual that’s not a problem but we have a many class sets of devices used 
by many students and we don’t want them to see the WIFI credentials and share 
them with friends etc..

I know this is probably very simple but is there a way to have the network 
connections section password protected? In most cases when you try to modify 
settings and install programs you are prompted for a password.

Any help would be greatly appreciated.

--
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

RE: Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Marc Tremblay 
Hi Peter,

This sounds interesting. So I would configure the WIFI through the terminal and 
the account credentials would not show up in the network connections GUI?

From: Peter Golis [mailto:gol...@centrum.sk]
Sent: June-16-15 10:03 AM
To: Marc Tremblay; 'lubuntu-users@lists.ubuntu.com'
Subject: Re: Security question regarding hiding the WIFI configuration username 
and password


Hello Marc,

Did you had try to setup WiFi network manually without use of graphical network 
manager? This will avoid readability of password/passpharse if configuration 
will be readable only by OS.



Peter.



__
> Od: Marc Tremblay mailto:mtremb...@lbpsb.qc.ca>>
> Komu: "'lubuntu-users@lists.ubuntu.com'" 
> mailto:lubuntu-users@lists.ubuntu.com>>
> Dátum: 16.06.2015 15:16
> Predmet: Security question regarding hiding the WIFI configuration username 
> and password
>
Good morning,

At our school board we have been converting all our older technology to 
Lubuntu. Our network manager has brought up a problem that he views as a 
security risk. He is not familiar with Linux and does not really like having 
these devices on our network.

In Network connections, users are able to access the network connections for 
the WIFI, click on edit and then click show password to see the credentials 
used for the WIFI access. In the case where the device belongs to one 
individual that’s not a problem but we have a many class sets of devices used 
by many students and we don’t want them to see the WIFI credentials and share 
them with friends etc..

I know this is probably very simple but is there a way to have the network 
connections section password protected? In most cases when you try to modify 
settings and install programs you are prompted for a password.

Any help would be greatly appreciated.


--

--
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users
-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

Adding a Lubuntu computer on our domain with computer authentication

2015-06-16 Thread Marc Tremblay 
Good afternoon,

This is somewhat of a follow up to the question I posted this morning. I am 
getting a lot of resistance from our IT dept when it comes to Lubuntu devices 
in our system. They are concerned with WIFI security for class sets of devices 
with generic user accounts.

They have asked me if it is possible for Lubuntu devices to use computer 
authentication to the domain instead of user authentication.

Would any of you be able to help me with this?
-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

RE: Security question regarding hiding the WIFI configuration username and password

2015-06-16 Thread Peter Golis 

Hello Marc,
Yes, also that workaround can fix it.
 
But as you had written in second email, you are fixing acces to he internet in 
school. So, better will be solution to authorize notebooks and tablets for 
students using WPA Enterprise with Radius. Radius can be configured to allow 
only one internet conection per one student, with deny during hours when they 
are learning according to personal schedulle plan. Some universites in old 
continent are using similar setup.
 
PS:Regarding your original question (how to disable button "show password" in network 
manager), did you had try to mark "all users may connect to this network" and create 
desktop user for student? You can login using student account and check if that button will be 
available for students. Also tha workaround shall theoretically work if nothing has changed in past 
years. but none of both listed workarounds wil provide clean solution.
 
 
Peter.
 
__

Od: Marc Tremblay 
Komu: Peter Golis , "'lubuntu-users@lists.ubuntu.com'" 

Dátum: 16.06.2015 16:48
Predmet: RE: Security question regarding hiding the WIFI configuration username 
and password


Hi Peter,
 
This sounds interesting. So I would configure the WIFI through the terminal and 
the account credentials would not show up in the network connections GUI?
 
From: Peter Golis [mailto:gol...@centrum.sk]
Sent: June-16-15 10:03 AM
To: Marc Tremblay; 'lubuntu-users@lists.ubuntu.com'
Subject: Re: Security question regarding hiding the WIFI configuration username 
and password
 
Hello Marc,
Did you had try to setup WiFi network manually without use of graphical network 
manager? This will avoid readability of password/passpharse if configuration 
will be readable only by OS.
 
Peter.
 
__

Od: Marc Tremblay >
Komu: "'lubuntu-users@lists.ubuntu.com'" >
Dátum: 16.06.2015 15:16
Predmet: Security question regarding hiding the WIFI configuration username and 
password


Good morning,
 
At our school board we have been converting all our older technology to 
Lubuntu. Our network manager has brought up a problem that he views as a 
security risk. He is not familiar with Linux and does not really like having 
these devices on our network.
 
In Network connections, users are able to access the network connections for 
the WIFI, click on edit and then click show password to see the credentials 
used for the WIFI access. In the case where the device belongs to one 
individual that’s not a problem but we have a many class sets of devices used 
by many students and we don’t want them to see the WIFI credentials and share 
them with friends etc..
 
I know this is probably very simple but is there a way to have the network 
connections section password protected? In most cases when you try to modify 
settings and install programs you are prompted for a password.
 
Any help would be greatly appreciated.


--

--
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com 
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users 


-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users

Re: Adding a Lubuntu computer on our domain with computer authentication

2015-06-16 Thread Andre Campos Rodovalho 
Hey Marc, "computer authentication" is a bit generic, since there is lots
of protocols for this. So, you mean RADIUS? IPsec? The good news is that
network protocols are standard, so, unless you guys are using something
proprietary (e.g. Active Directory), probably Linux supports...

I suggested you the MAC filter. MAC filter is very very simple. I can't
understand why some devices might work and others not, specially because
this is not a protocol, is just a rule on the router, allowing or not
traffic for/from a given Hardware Address.



2015-06-16 16:04 GMT-03:00 Marc Tremblay :

>  Good afternoon,
>
>
>
> This is somewhat of a follow up to the question I posted this morning. I
> am getting a lot of resistance from our IT dept when it comes to Lubuntu
> devices in our system. They are concerned with WIFI security for class sets
> of devices with generic user accounts.
>
>
>
> They have asked me if it is possible for Lubuntu devices to use *computer*
> authentication to the domain instead of *user* authentication.
>
>
>
> Would any of you be able to help me with this?
>
> --
> Lubuntu-users mailing list
> Lubuntu-users@lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/lubuntu-users
>
>
-- 
Lubuntu-users mailing list
Lubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/lubuntu-users